StackRadar

CVE-2021-21240

High

Advisory

Published 8 Feb 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.036
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
20
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 2
affected packages

Regular Expression Denial of Service (REDoS) in httplib2

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
httplib2pypi0.8, 0.11.3, 0.12.1, 0.14.0+2 more0.19.015
python-httplib2deb0.8-2build1, 0.14.0-1ubuntu1, 0.20.2-2, 0.20.2-2ubuntu0.1no fix listed7
OSV records
GHSA-93xj-8mrv-444mUBUNTU-CVE-2021-21240
Also known as
PYSEC-2021-16

Charts affected

20 by stars
ChartLatestAffected imagesRadar Score
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
httplib2@0.15.0
0.19.0

Open the chart page →

5,851
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
httplib2@0.15.0
0.19.0

Open the chart page →

52,919
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
python-httplib2@0.20.2-2
no fix listed

Open the chart page →

27,267
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
httplib2@0.18.1
0.19.0

Open the chart page →

6,868
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-httplib2@0.20.2-2
no fix listed

Open the chart page →

10,858
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
httplib2@0.18.1
0.19.0

Open the chart page →

35,305
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
httplib2@0.18.1
0.19.0

Open the chart page →

42,126
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
httplib2@0.18.1
0.19.0

Open the chart page →

2,504
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
httplib2@0.12.1
0.19.0

Open the chart page →

5,060
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
httplib2@0.8
python-httplib2@0.8-2build1
0.19.0
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
httplib2@0.8
python-httplib2@0.8-2build1
0.19.0
no fix listed

Open the chart page →

70,895
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
httplib2@0.18.1
0.19.0

Open the chart page →

5,055
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
httplib2@0.14.0
python-httplib2@0.14.0-1ubuntu1
0.19.0
no fix listed

Open the chart page →

64,489
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
httplib2@0.14.0
0.19.0

Open the chart page →

3,314
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
httplib2@0.18.1
0.19.0

Open the chart page →

38,133
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
httplib2@0.18.1
0.19.0

Open the chart page →

26,018
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
httplib2@0.11.3
0.19.0
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
httplib2@0.11.3
0.19.0

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
httplib2@0.11.3
0.19.0

Open the chart page →

26,211
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
python-httplib2@0.20.2-2
no fix listed

Open the chart page →

7,295
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
httplib2@0.18.1
0.19.0

Open the chart page →

2,296
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2021-21240.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
python-httplib2@0.20.2-2ubuntu0.1
no fix listed

Open the chart page →

7,849

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
amancevice/superset:0.35.212a0a9e66550
httplib2@0.15.0
0.19.0
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
httplib2@0.11.3
0.19.0
2
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
httplib2@0.18.1
0.19.0
2
amancevice/superset:0.28.1c8c04bfe3d66
httplib2@0.12.1
0.19.0
1
datamate/seafile-professional:11.0.202dd66b722464
python-httplib2@0.20.2-2
no fix listed
1
dysnix/pritunl:v1.29-r819951e3e7a32
httplib2@0.18.1
0.19.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
httplib2@0.14.0
python-httplib2@0.14.0-1ubuntu1
0.19.0
no fix listed
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
httplib2@0.18.1
0.19.0
1
galaxy/galaxy-init:v18.010267bad550e6
httplib2@0.8
python-httplib2@0.8-2build1
0.19.0
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
httplib2@0.8
python-httplib2@0.8-2build1
0.19.0
no fix listed
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
httplib2@0.18.1
0.19.0
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
httplib2@0.18.1
0.19.0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
httplib2@0.11.3
0.19.0
1
redash/redash:10.0.0.b503639392753c0376
httplib2@0.14.0
0.19.0
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-httplib2@0.20.2-2
no fix listed
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
httplib2@0.18.1
0.19.0
1
trueosiris/vrising:latest9356f98ad561
python-httplib2@0.20.2-2
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
python-httplib2@0.20.2-2ubuntu0.1
no fix listed
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
httplib2@0.18.1
0.19.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.